Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
File: E93mmrzMZdCGiMqDVCYzohkpMic.mft (raw, json)
Hash identifier: 1Me7cjkyaJ5Zl2b8MeKxspMOx4DI/b/uW7P6z53Cs+s=
Subject key identifier: 14:01:0E:E4:A1:DB:AC:70:EB:2C:54:9D:88:81:B1:F5:A4:14:16:0A
Authority key identifier: 13:DD:E6:9A:BC:CC:65:D0:86:88:CA:83:54:26:33:A2:19:29:32:27
Certificate issuer: /CN=13dde69abccc65d08688ca83542633a219293227
Certificate serial: 0194BD17969E7ECE9572BA29CB1A17BF052A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E93mmrzMZdCGiMqDVCYzohkpMic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
Manifest number: 0A57
Signing time: Fri 31 Jan 2025 16:00:27 +0000
Manifest this update: Fri 31 Jan 2025 16:00:27 +0000
Manifest next update: Sat 01 Feb 2025 16:00:27 +0000
Files and hashes: 1: E93mmrzMZdCGiMqDVCYzohkpMic.crl (hash: G8XPwIm9wS7cxT3X8Rn2ybO22ChesOGgr7xfLVaguGM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:96:9e:7e:ce:95:72:ba:29:cb:1a:17:bf:05:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13dde69abccc65d08688ca83542633a219293227
Validity
Not Before: Jan 31 16:00:27 2025 GMT
Not After : Feb 1 16:00:27 2025 GMT
Subject: CN=14010ee4a1dbac70eb2c549d8881b1f5a414160a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ba:b8:27:90:3f:49:88:e3:23:d0:2d:1f:ed:
4e:36:24:2a:55:81:a8:f9:e4:46:c3:d7:03:57:a9:
45:1f:2c:7b:bf:c5:44:e6:ad:41:5f:93:2f:19:19:
98:6d:21:15:4c:9e:d9:15:35:6d:1f:87:d4:bb:5a:
5c:9c:77:b2:e4:5f:3e:26:64:2a:6f:80:37:46:fc:
4a:92:81:84:c0:d8:74:09:f6:8f:e4:db:97:32:b2:
8f:a4:c9:da:ee:98:fd:e0:24:11:61:6d:69:d0:66:
0d:4a:fb:b1:cc:d1:70:a1:f6:fc:44:04:dc:4c:4e:
23:a8:8b:7f:c4:9a:14:14:b5:18:af:50:99:bd:6d:
51:21:bc:0e:99:8a:23:36:40:81:f2:7d:19:98:5a:
08:e9:46:b2:d0:c6:11:5c:90:8b:70:19:26:5d:05:
2c:38:b8:9c:7f:4b:1b:25:af:95:a1:b2:76:cb:9e:
31:fb:3c:df:f0:b0:e9:d4:94:73:9c:dd:c5:b8:ea:
4d:6a:bc:0a:be:01:b7:92:59:db:61:17:11:b7:ac:
c2:41:4b:3b:49:50:c5:af:c0:e8:ac:77:1e:a5:45:
1a:b8:38:e0:c6:ca:6e:16:35:a2:21:9a:05:d7:ae:
28:27:08:e0:c8:16:cb:89:6c:ed:5a:73:0c:61:69:
13:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:01:0E:E4:A1:DB:AC:70:EB:2C:54:9D:88:81:B1:F5:A4:14:16:0A
X509v3 Authority Key Identifier:
keyid:13:DD:E6:9A:BC:CC:65:D0:86:88:CA:83:54:26:33:A2:19:29:32:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E93mmrzMZdCGiMqDVCYzohkpMic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:28:d6:ea:43:e4:02:dd:ad:de:04:14:c4:8f:f2:47:83:4e:
3f:d1:c3:c4:28:e7:b8:a4:9f:93:c9:b7:d4:97:d2:ed:6c:fc:
3c:27:2a:8f:d3:9d:12:7f:18:40:f8:bf:3b:96:16:86:15:13:
ef:6b:a9:bd:a9:67:d9:e6:c5:ad:eb:c1:dd:68:15:bc:0e:19:
9a:31:5c:d5:98:81:dc:00:0c:4e:ae:fc:8c:e6:28:cf:98:44:
4a:7c:ef:8c:ac:18:a8:23:ad:66:1e:18:f9:23:78:56:86:f7:
67:57:49:e5:17:6a:79:7c:56:f6:09:b7:11:bb:ac:3b:f4:c3:
12:85:eb:b1:5e:8f:06:42:1e:be:11:fa:f6:31:43:a1:c2:67:
3e:d4:50:88:2b:f5:32:47:f3:9d:0d:b0:8c:1f:34:9a:20:5d:
25:11:20:eb:c1:be:14:16:ca:bb:b4:bd:df:1f:8a:0f:82:36:
31:61:51:83:1d:f2:03:af:53:ba:2a:03:dc:13:e6:d8:3c:e0:
e2:16:be:97:1d:0a:81:8d:c7:46:a1:51:c3:03:7b:27:9a:56:
84:76:71:2c:1d:e3:4c:fe:f6:5e:5d:c1:44:fc:50:74:db:82:
57:24:9b:9d:d7:b2:89:00:90:18:97:46:65:f3:ed:27:60:75:
a2:90:07:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F5aefs6VcropyxoXvwUqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZGRlNjlhYmNjYzY1ZDA4Njg4Y2E4MzU0MjYzM2EyMTky
OTMyMjcwHhcNMjUwMTMxMTYwMDI3WhcNMjUwMjAxMTYwMDI3WjAzMTEwLwYDVQQD
EygxNDAxMGVlNGExZGJhYzcwZWIyYzU0OWQ4ODgxYjFmNWE0MTQxNjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrq4J5A/SYjjI9AtH+1ONiQqVYGo
+eRGw9cDV6lFHyx7v8VE5q1BX5MvGRmYbSEVTJ7ZFTVtH4fUu1pcnHey5F8+JmQq
b4A3RvxKkoGEwNh0CfaP5NuXMrKPpMna7pj94CQRYW1p0GYNSvuxzNFwofb8RATc
TE4jqIt/xJoUFLUYr1CZvW1RIbwOmYojNkCB8n0ZmFoI6Uay0MYRXJCLcBkmXQUs
OLicf0sbJa+VobJ2y54x+zzf8LDp1JRznN3FuOpNarwKvgG3klnbYRcRt6zCQUs7
SVDFr8DorHcepUUauDjgxspuFjWiIZoF164oJwjgyBbLiWztWnMMYWkTxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQBDuSh26xw6yxUnYiBsfWkFBYKMB8GA1UdIwQY
MBaAFBPd5pq8zGXQhojKg1QmM6IZKTInMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTkzbW1yek1aZENHaU1xRFZDWXpvaGtwTWljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9jNjM2Y2MtNDA1YS00ZjFlLTkzNmEt
ODQzN2NjOTIyODJhLzEvRTkzbW1yek1aZENHaU1xRFZDWXpvaGtwTWljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9jNjM2Y2MtNDA1YS00ZjFlLTkzNmEtODQzN2NjOTIyODJh
LzEvRTkzbW1yek1aZENHaU1xRFZDWXpvaGtwTWljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMyjW6kPk
At2t3gQUxI/yR4NOP9HDxCjnuKSfk8m31JfS7Wz8PCcqj9OdEn8YQPi/O5YWhhUT
72upvaln2ebFrevB3WgVvA4ZmjFc1ZiB3AAMTq78jOYoz5hESnzvjKwYqCOtZh4Y
+SN4Vob3Z1dJ5RdqeXxW9gm3EbusO/TDEoXrsV6PBkIevhH69jFDocJnPtRQiCv1
MkfznQ2wjB80miBdJREg68G+FBbKu7S93x+KD4I2MWFRgx3yA69TuioD3BPm2Dzg
4ha+lx0KgY3HRqFRwwN7J5pWhHZxLB3jTP72Xl3BRPxQdNuCVySbndeyiQCQGJdG
ZfPtJ2B1opAHAA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:32:09 2025 by rpki-client